Reset Solmara around authority-owned Relay and Evidence - #23

Merged

jeremi merged 53 commits into

mainfrom

codex/solmara-authority-cells-reset

Aug 19, 2026

Commits on Aug 5, 2026

Migrate local lab to Registry Evidence
jeremi
committed
a6a92e0

Commits on Aug 12, 2026

Reset Solmara around authority-owned Relay and Evidence
jeremi
committed
3bbe0f8
Fix pnpm setup in CI
jeremi
committed
808d6ad
Stabilize signer replacement race test
jeremi
committed
f632a67
Report failing Relay verification stage
jeremi
committed
1b5f934
Harden hosted authority provisioning
jeremi
committed
4ba7b58
Preserve Relay check diagnostics
jeremi
committed
f59ef5b
Pin Relay SQLite publication runtime
jeremi
committed
37ef685
Smoke signer key binding in release workflow
jeremi
committed
f1fef9b
Retry verified Registry Stack downloads
jeremi
committed
390fbfb
Use pinned Relayctl for runtime packaging
jeremi
committed
4af1aea
chore: consume Registry Stack v0.21.0 images
jeremi
committed
6ea2846
ci: reuse verified Relayctl asset
jeremi
committed
98dd780
ci: keep Solmara lint within repository source
jeremi
committed
cbb4a79
test: isolate Relayctl asset fixture
jeremi
committed
7321716
fix: support Linux-owned local signer binds
jeremi
committed
ba30d4c
fix: allow Linux CI signers to read bound keys
jeremi
committed
3b9965d
fix: read Linux-owned local runtime secrets
jeremi
committed
807e7ee
fix: initialize local authority audit volumes
jeremi
committed
8ef18e7
fix: reject unsafe authority audit files
jeremi
committed
f4ed0ea
test: pin authority audit initializer lifecycle
jeremi
committed
70a96ae
ci: report authority startup failures
jeremi
committed
28a6e6a
fix(local): stage authority runtime secrets
jeremi
committed
d62d37b
ci: report relay startup failures
jeremi
committed
dbf2455
fix(local): align Relay runtime ownership
jeremi
committed
58a943e
fix(hosted): isolate authority networks
jeremi
committed
ff93f4b
fix(local): stage sealed Relay runtimes
jeremi
committed
1c495fc
fix(hosted): close authority rollout origins
jeremi
committed
60c7c1b
test(local): build sealed Relay fixture
jeremi
committed
b3c2335
fix(release): pass hosted provision origins
jeremi
committed
5edf0d6
fix(hosted): initialize provisioned volumes in image smoke
jeremi
committed
37f0a34
fix(hosted): preserve provisioner idempotence
jeremi
committed
1a8b1c2
fix(hosted): initialize runner-owned volumes
jeremi
committed
d17c8ab

Commits on Aug 13, 2026

test(hosted): tamper immutable runtime in container
jeremi
committed
51b8205
test(hosted): bound signer startup wait
jeremi
committed
ce3bbf6
test(hosted): exercise signer socket volume
jeremi
committed
0162ea9
feat(hosted): add side-by-side evidence routes
jeremi
committed
f146fdb
fix(hosted): split authority signers
jeremi
committed
690c556
fix(hosted): inject secrets through tmpfs
jeremi
committed
092037d
docs(hosted): clarify runtime secret storage
jeremi
committed
2ac5afc
docs(hosted): start Mint before Relays
jeremi
committed
c787298
fix(hosted): gate rollout on signer and Mint readiness
jeremi
committed
2b7f7b4
fix(hosted): make Mint readiness deployment-blocking
jeremi
committed
aa364b6
fix(hosted): consume bootstrap secrets before runtime
jeremi
committed
108b161
fix(ci): keep Relay provision smoke secret-free
jeremi
committed
43aba9d
fix(ci): smoke disposable provisioner secrets
jeremi
committed
bbfe01f
fix(hosted): omit tmpfs for secret provisioners
jeremi
committed
154c085
fix(hosted): bind Evidence to isolated networks
jeremi
committed
8eea727
fix(ci): share hosted bind-host contract
jeremi
committed
c920307
fix(hosted): install runtime secrets for nonroot services
jeremi
committed
b9da809

Commits on Aug 19, 2026

chore(deps): adopt Registry Stack v0.22.0
jeremi
committed
8b676c0
fix(esignet): start the local eSignet UI without hosted public hosts
jeremi
committed
afc3eda
ci: install just from a checksum-pinned release
jeremi
committed
98cbe8a